The DOI matches its Crossref record; 57 of the 59 references it cites were found in a registry or an index.
LIRA: Learnable, Imperceptible and Robust Backdoor Attacks
Abstract
Recently, machine learning models have demonstrated to be vulnerable to backdoor attacks, primarily due to the lack of transparency in black-box models such as deep neural networks. A third-party model can be poisoned such that it works adequately in normal conditions but behaves maliciously on samples with specific trigger patterns. However, the trigger injection function is manually defined in most existing backdoor attack methods, e.g., placing a small patch of pixels on an image or slightly deforming the image before poisoning the model. This results in a two-stage approach with a sub-optimal attack success rate and a lack of complete stealthiness under human inspection.In this paper, we propose a novel and stealthy backdoor attack framework, LIRA, which jointly learns the optimal, stealthy trigger injection function and poisons the model. We formulate such an objective as a non-convex, constrained optimization problem. Under this optimization framework, the trigger generator function will learn to manipulate the input with imperceptible noise to preserve the model performance on the clean data and maximize the attack success rate on the poisoned data. Then, we solve this challenging optimization problem with an efficient, two-stage stochastic optimization procedure. Finally, the proposed attack framework achieves 100% success rates in several benchmark datasets, including MNIST, CIFAR10, GTSRB, and T-ImageNet, while simultaneously bypassing existing backdoor defense methods and human inspection.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“Generally, a high BAR is equivalent to a high ASR and BTA.”
From Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey (2024) · cites this paper as [143]
Citations
Cites
Deep Residual Learning for Image Recognition
He, K., Zhang, X., Ren, S., & Sun, J. (2016) · 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr.2016.90 · Cited by 235,474
ImageNet classification with deep convolutional neural networks
Krizhevsky, A., Sutskever, I., & Hinton, G. E. (2017) · Communications of the ACM · doi:10.1145/3065386 · Cited by 112,155
U-Net: Convolutional Networks for Biomedical Image Segmentation
Ronneberger, O., Fischer, P., & Brox, T. (2015) · Lecture notes in computer science · doi:10.1007/978-3-319-24574-4_28 · Cited by 99,404
BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding
Devlin, J., Chang, M.-W., Lee, K., & Toutanova, K. (2018) · arXiv · doi:10.48550/arxiv.1810.04805 · Cited by 73,173
BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding
Devlin, J., Chang, M.-W., Lee, K., & Toutanova, K. (2019) · Proceedings of the 2019 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long and Short Papers) · doi:10.18653/v1/n19-1423 · Cited by 54,325
Grad-CAM: Visual Explanations from Deep Networks via Gradient-Based Localization
Selvaraju, R. R., Cogswell, M., Das, A., Vedantam, R., Parikh, D., & Batra, D. (2017) · 2017 IEEE International Conference on Computer Vision (ICCV) · doi:10.1109/iccv.2017.74 · Cited by 24,513
Mastering the game of Go without human knowledge
Silver, D., Schrittwieser, J., Simonyan, K., Antonoglou, I., Huang, A., Guez, A., Hubert, T., Baker, L., Lai, M., Bolton, A., et al. (2017) · Nature · doi:10.1038/nature24270 · Cited by 9,084
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Towards Deep Learning Models Resistant to Adversarial Attacks
Madry, A., Makelov, A., Schmidt, L., Tsipras, D., & Vladu, A. (2017) · arXiv · doi:10.48550/arxiv.1706.06083 · Cited by 6,602
(2017) · International Conference on Machine Learning · Cited by 6,382
Research works printed but not linked: 3
- doan, 2020, Image generation via minimizing fr\’echet distance in discriminator feature space, arXiv preprint arXiv 2003 11055
- goodfellow, 2014, Generative adversarial nets, Advances in Neural Information Processing Systems (NIPS), 2672
- salem, 2020, Dynamic backdoor attacks against machine learning models, arXiv preprint arXiv 2003 07516
Cited by
Sorted by citations
Items 101–200 of 211
Hide and Seek: On the Stealthiness of Attacks Against Deep Learning Systems
Liu, Z., Li, F., Lin, J., Zhu Li, B., & Luo, B. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-17143-7_17 · Cited by 4
Mo, M., Wang, C., & Bian, S. (2024) · Symmetry · doi:10.3390/sym16030299 · Cited by 4
Rong, D., Yu, G., Shen, S., Fu, X., Qian, P., Chen, J., He, Q., Fu, X., & Wang, W. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-72359-9_14 · Cited by 8
Event Trojan: Asynchronous Event-Based Backdoor Attacks
Wang, R., Guo, Q., Li, H., & Wan, R. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-72667-5_18 · Cited by 4
FEAT: Frequency Energy Based Backdoor Attack in Deep Neural Networks
Li, J., Chen, H., Gao, Y., Li, J., Wang, W., Yu, J., & Qiu, J. (2025) · Expert Systems with Applications · doi:10.1016/j.eswa.2025.127352 · Cited by 3
Norm-Based Outlier Filtering and Consensus Aggregation for Robust Federated Learning
Yeo, H., & Lee, J.-W. (2025) · IEEE Access · doi:10.1109/access.2025.3580198 · Cited by 4
PCAP-Backdoor: Backdoor Generator in Network Traffic for Intrusion Detection Systems
Chathoth, A. K., Parashar, K., Peng, A., & Lee, S. (2026) · ACM Transactions on Cyber-Physical Systems · doi:10.1145/3805033 · Cited by 16
SecFedDrive: Securing Federated Learning for Autonomous Driving Against Backdoor Attacks
Kumar, R., Ebbrecht, G., Farooq, J., Wei, W., Mao, Y., & Chen, J. (2024) · IEEE Conference on Communications and Network Security · doi:10.1109/cns62487.2024.10735501 · Cited by 3
Lee, T., Lee, S., & Kwon, H. (2025) · IEEE Access · doi:10.1109/access.2024.3474088 · Cited by 5
IBD: An Interpretable Backdoor-Detection Method via Multivariate Interactions
Xu, Y., Liu, X., Ding, K., & Xin, B. (2022) · Sensors · doi:10.3390/s22228697 · Cited by 3
BadDGA: Backdoor Attack on LSTM-Based Domain Generation Algorithm Detector
Zhai, Y., Yang, L., Yang, J., He, L., & Li, Z. (2023) · Electronics · doi:10.3390/electronics12030736 · Cited by 3
Unlabeled backdoor poisoning on trained-from-scratch semi-supervised learning
Feng, L., Qian, Z., Zhang, X., & Li, S. (2023) · Information Sciences · doi:10.1016/j.ins.2023.119453 · Cited by 3
Do Backdoors Assist Membership Inference Attacks?
Goto, Y., Ashizawa, N., Shibahara, T., & Yanai, N. (2024) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-031-64954-7_13 · Cited by 3
Towards Physical World Backdoor Attacks Against Skeleton Action Recognition
Zheng, Q., Yu, Y., Yang, S., Liu, J., Lam, K., & Kot, A. C. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-73195-2_13 · Cited by 3
Affinity Backdoor Attacks in Point Clouds: A Novel Method Resilient to Corruption
Gao, T., Xia, Z., & Pan, Y. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3575274 · Cited by 4
Preference Poisoning Attacks on Reward Model Learning
Wu, J., Wang, J., Xiao, C., Wang, C., Zhang, N., & Vorobeychik, Y. (2025) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp61157.2025.00094 · Cited by 17
ReVeil: Unconstrained Concealed Backdoor Attack on Deep Neural Networks using Machine Unlearning
Alam, M., Lamri, H., & Maniatakos, M. (2025) · ACM/IEEE Design Automation Conference (DAC) · doi:10.1109/dac63849.2025.11133199 · Cited by 5
Integrity Authentication in Tree Models
Zhao, W., Lao, Y., & Li, P. (2022) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/3534678.3539428 · Cited by 4
Self-citationBackdoor Pony: Evaluating backdoor attacks and defenses in different domains
Mercier, A., Smolin, N., Sihlovec, O., Koffas, S., & Picek, S. (2023) · SoftwareX · doi:10.1016/j.softx.2023.101387 · Cited by 3
Detecting All-to-One Backdoor Attacks in Black-Box DNNs via Differential Robustness to Noise
Fu, H., Krishnamurthy, P., Garg, S., & Khorrami, F. (2025) · IEEE Access · doi:10.1109/access.2025.3543333 · Cited by 2
DeDe: Detecting Backdoor Samples for SSL Encoders via Decoders
Hou, S., Li, S., & Yao, D. (2025) · IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings - IEEE Computer Society Conference on Computer Vision and Pattern Recognition/Proceedings · doi:10.1109/cvpr52734.2025.01925 · Cited by 6
The Image Scaling Attack: Unveiling the Risks in Traffic Sign Classification
Reif, A. K., Stolz, T., Picek, S., Ramírez-Agudelo, O. H., & Karl, M. (2025) · IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) · doi:10.1109/eurospw67616.2025.00041 · Cited by 2
Zhang, L., Peng, Y., Wei, L., Chen, C., & Zhang, X. (2023) · Security and Communication Networks · doi:10.1155/2023/9308909 · Cited by 2
WaTrojan: Wavelet domain trigger injection for backdoor attacks
Zhang, Z., Ding, J., Zhang, Q., & Deng, Q. (2024) · Computers & Security · doi:10.1016/j.cose.2024.103767 · Cited by 2
Towards a unified framework for imperceptible textual attacks
Shi, J., Li, L., & Zeng, D. D. (2024) · Applied Intelligence · doi:10.1007/s10489-024-05292-6 · Cited by 2
Backdoor Attack Against One-Class Sequential Anomaly Detection Models
Cheng, H., & Yuan, S. (2024) · Lecture notes in computer science · doi:10.1007/978-981-97-2259-4_20 · Cited by 3
Augmented Neural Fine-Tuning for Efficient Backdoor Purification
Karim, N., Arafat, A. A., Khalid, U., Guo, Z., & Rahnavard, N. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-72989-8_23 · Cited by 5
Model X-ray : Detecting Backdoored Models via Decision Boundary
Su, Y., Zhang, J., Xu, T., Zhang, T., Zhang, W., & Yu, N. (2024) · ACM International Conference on Multimedia (ACM MM) · doi:10.1145/3664647.3681075 · Cited by 4
Data Poisoning Quantization Backdoor Attack
Huynh, T., Tran, A., Doan, K. D., & Pham, T. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-72907-2_3 · Cited by 3
Self-citationAdversarially Robust Anti-Backdoor Learning
Zhao, Q., & Wressnegger, C. (2024) · doi:10.1145/3689932.3694763 · Cited by 2
BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation
Yu, H., Xie, T., Gui, J., Wang, P., Cheng, P., Yi, P., & Wu, Y. (2025) · ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/3690624.3709385 · Cited by 3
AS-FIBA: Adaptive Selective Frequency-Injection for Backdoor Attack on Deep Face Restoration
Song, Z., Gao, W., Zhang, Z., & Lu, J. (2024) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom63139.2024.00136 · Cited by 2
Semantic-Aware Framework for Backdoor Detection in AI Models
Fu, K., & Dai, J. (2025) · International Journal on Semantic Web and Information Systems · doi:10.4018/ijswis.378675 · Cited by 2
Applying NIST SP 800-161 in Supply Chain Processes Empowered by Artificial Intelligence
Al-Alawi, L., Al-Busaidi, R., & Ali, S. (2021) · International Arab Conference on Information Technology (ACIT) · doi:10.1109/acit53391.2021.9677393 · Cited by 2
Unlearnable Examples Detection via Iterative Filtering
Yu, Y., Zheng, Q., Yang, S., Yang, W., Liu, J., Lu, S., Tan, Y., Lam, K., & Kot, A. C. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-72359-9_18 · Cited by 2
ICT: Invisible Computable Trigger Backdoor Attacks in Transfer Learning
Chen, X., Liu, B., Zhao, S., Liu, M., Xu, H., Li, Z., & Zheng, Z. (2024) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2024.3476313 · Cited by 1
Flatness-Aware Sequential Learning Generates Resilient Backdoors
Pham, H., Ta, A. T., Tran, A., & Doan, K. D. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-73021-4_6 · Cited by 1
Self-citationCovert and Potent: A Weather-Camouflaged Backdoor Attacks on Self-Supervised Learning
Yang, W., Yang, Y., Liu, B., & Xiao, B. (2025) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp49660.2025.10888213 · Cited by 1
MACS-BNet: A Stealthy Multiconstraint Adversarial Backdoor Network Against Compressed Learning
Zhu, H., Wu, W. D., Peng, H., & Zhao, D. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3563088 · Cited by 1
Covert and Persistent Backdoor Attacks in Federated Learning-Powerd Autonomous Driving
Wang, Z., Yang, F., Peng, L., & Song, J. (2024) · IEEE International Conference on High Performance Computing and Communications; IEEE International Conference on Smart City; IEEE International Conference on Data Science and Systems (HPCC/SmartCity/DSS) · doi:10.1109/hpcc64274.2024.00114 · Cited by 1
When Deepfake Meets Backdoor: Leveraging GAN Fingerprints for Data Poisoning Attack
Zhao, Y. C., Ma, Y., Ge, Y., Zhao, L., Zhao, L., & Wang, Q. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3633381 · Cited by 2
Dataset ownership verification with invisible backdoors
Kim, S., & Hahn, C. (2025) · Applied Intelligence · doi:10.1007/s10489-025-06994-1 · Cited by 1
Jia, J., Feng, B., Zhang, W., Li, A., Wu, C., Ma, S., & Deng, R. H. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3619517 · Cited by 1
Unsupervised Backdoor Detection and Mitigation for Spiking Neural Networks
Li, J., Wu, B. Y., Xia, X., Liu, X., Yi, X., & Zhang, X. (2025) · International Symposium on Research in Attacks, Intrusions and Defenses (RAID) · doi:10.1109/raid67961.2025.00025 · Cited by 4
Sun, M., Lv, P., Zhang, S., Liu, J., Chen, K., Li, H., Li, Z., Jiang, Q., & Sun, L. (2026) · Journal of Computer Security · doi:10.1177/0926227x261417052 · Cited by 1
SPD: Shallow Backdoor Protecting Deep Backdoor Against Backdoor Detection
Yuan, S., Li, X., Cao, X., Zhang, H. L., Zhu, M., & DENG, R. H. (2025) · IEEE/CVF International Conference on Computer Vision (ICCV) · doi:10.1109/iccv51701.2025.00384 · Cited by 1
Delgado, J., Leon, S., & Ticona, W. (2026) · Lecture notes in networks and systems · doi:10.1007/978-3-032-22236-7_12 · Cited by 1
Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning
Herath, K., Zhao, J. Y., & Bagchi, S. (2026) · International Conference on Dependable Systems & Networks/Proceedings · doi:10.1109/dsn69566.2026.00032 · Cited by 1
Computational Color Constancy-Based Backdoor Attacks
Vršnak, D., Sabolić, I., Subašić, M., & Lončarić, S. (2023) · International symposium on image and signal processing and analysis/ISPA ... · doi:10.1109/ispa58351.2023.10278694 · Cited by 1
Exploring the vulnerability of self-supervised monocular depth estimation models
Hou, R., Mo, K., Long, Y., Li, N., & Rao, Y. (2024) · Information Sciences · doi:10.1016/j.ins.2024.120874 · Cited by 1
An Invisible Backdoor Attack on Cloud Computing in the Internet of Things
Qian, X., Zhang, R., Kang, Z. H., & Xia, H. (2024) · IEEE Conference on Big Data Security on Cloud (BigDataSecurity) · doi:10.1109/bigdatasecurity62737.2024.00025 · Cited by 1
PBIM: Paired Backdoor Injection Method for Change Detection
Huang, R., Hao, M., Guo, Z., & Zhang, Y. (2024) · Lecture notes in computer science · doi:10.1007/978-981-97-5588-2_28 · Cited by 1
Novel Lightweight Method for Detecting Backdoor Attacks in Edge-Deployed Neural Networks
Douch, S., Abid, M. R., Zine-Dine, K., Bouzidi, D., & Benhaddou, D. (2024) · International Conference on Advanced Communication Technologies and Networking (CommNet) · doi:10.1109/commnet63022.2024.10793359 · Cited by 1
Backdoor Mitigation in Deep Neural Networks via Strategic Retraining
Dhonthi, A., Hahn, E. M., & Hashemi, V. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-27481-7_37 · Cited by 1
Contributor-Aware Defenses Against Adversarial Backdoor AttacksPreprint
Dawson, G., Umer, M., & Robi Polikar, A. (2022) · doi:10.36227/techrxiv.19918651
Efficient any-Target Backdoor Attack with Pseudo Poisoned Samples
Huang, B., & Wang, Z. (2023) · Proceedings - International Conference on Image Processing · doi:10.1109/icip49359.2023.10222807
OrdinalNet - Dynamic and Robust Backdoor Attacks
Ma, X., Gui, Z., & Lu, Y. (2023) · IEEE International Conference on Software Engineering and Service Science (ICSESS) · doi:10.1109/icsess58500.2023.10293062
Implementing a Multitarget Backdoor Attack Algorithm Based on Procedural Noise Texture Features
Liu, Q. B., Kang, C., Zou, Q., & Guan, Q. (2024) · IEEE Access · doi:10.1109/access.2024.3401848 · Cited by 1
MPS: A Multiple Poisoned Samples Selection Strategy in Backdoor Attack
Zou, W., Zhang, S., Wang, W., Zhang, J., & Liu, X. (2023) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom60117.2023.00125
DLD: Defending Against Backdoors Using Differential Logits
Yi, M., Wang, Y., Deng, K., Yin, M., Meng, F., & Duan, Y. (2024) · IEEE Advanced Information Management, Communicates, Electronic and Automation Control Conference (IMCEC) · doi:10.1109/imcec59810.2024.10575329
Invisible Backdoor Attacks on Key Regions Based on Target Neurons in Self-Supervised Learning
Qian, X., He, Y., Zhang, R., Kang, Z. H., Sheng, Y., & Xia, H. (2024) · Lecture notes in computer science · doi:10.1007/978-981-97-5498-4_10
Invisible Backdoor Attack against 3D Point Cloud by Optimized 3D Transformation
Ao, Z., & Yufeng, L. (2024) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn60899.2024.10651278
FedTrojan: Corrupting Federated Learning via Zero-Knowledge Federated Trojan Attacks
Chang, S., Liu, Y., Lin, Z., Zhu, H., Zhu, B., & Wang, C. (2024) · International Workshop on Quality of Service · doi:10.1109/iwqos61813.2024.10682906
Composite Concept Extraction Through Backdooring
Ghosh, B., Harikumar, H., Doan, K. D., Venkatesh, S., & Rana, S. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-78110-0_18
Self-citationLayerDBA: Circumventing Similarity-Based Defenses in Federated Learning
Nikolov, J., Pegoraro, A., Rieger, P., & Sadeghi, A. (2024) · IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw63631.2024.10795458
A backdoor attack method based on target feature enhanced generative network
Zhao, C., Xiao, T., Deng, X., & Jiang, W. R. (2024) · Information Sciences · doi:10.1016/j.ins.2024.121776
Invisible Backdoor Learning in Transform Domain with Flexible Triggers and Targets
Sun, Y., Lu, Y., Yan, X., & Pang, Z. (2025) · Electronics · doi:10.3390/electronics14010196
Partially training, isolating and unlearning, mitigating backdoor attack
Li, Y., Gao, H., Chen, H., Wang, Y., & Yu, C. P. (2024) · IEEE International Conference on Big Data (BigData) · doi:10.1109/bigdata62323.2024.10825788
IdentityLock: An Identity-aware Backdoor strategy for Face Swapping Defense
Huang, Z., Yu, P., Xia, Z., Yang, X., & Lu, R. (2025) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp49660.2025.10890392 · Cited by 1
Erasing backdoor of deep neural networks using neural perturbation-based attention distillation
Chen, J., Yan, H., Liu, B., Zhao, S., Chen, X., Li, Z., & Xu, H. (2025) · Advances in Complex Systems · doi:10.1142/s1793962325500369 · Cited by 1
RTS: A Training-time Backdoor Defense Strategy Based on Weight Residual Tendency
Fan, X., Li, X., & Meng, G. (2024) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom63139.2024.00119
Zhou, H., Zheng, Y., Hu, Y., Zhang, S., Guo, W., Tai, Y., Feng, Y., Wang, Y., & Pan, H. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5245681
On the Effectiveness of Invisible Backdoor Attacks in Federated Learning
Marinus, M., Tsouvalas, V., & Meratnia, N. (2025) · Communications in computer and information science · doi:10.1007/978-981-96-4836-8_13
RGB Single-Channel Frequency Domain Backdoor Attack on Image Manipulation Localization
Lu, X., Yang, L., Luo, G., & Zhu, Y. (2025) · International Conference on Computer Supported Cooperative Work in Design (CSCWD) · doi:10.1109/cscwd64889.2025.11033551
Control ControlNet: Multidimensional Backdoor Attack Based on ControlNet
Pan, Y. C., Dai, B., Chen, J., & Wang, L. (2025) · Communications in computer and information science · doi:10.1007/978-981-96-7005-5_18
Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models
Huang, Z., Chen, J., Zhang, Z., & Yu, C.-M. (2025) · International Conference on Dependable Systems & Networks/Proceedings · doi:10.1109/dsn64029.2025.00058 · Cited by 2
Trigger-free and data-free backdoor attacks on deep neural networks
Wang, J., Zhang, X., Zhang, H., Ma, X., Cheng, X., Hu, P., & Zhang, G. (2025) · Scientia Sinica Informationis · doi:10.1360/ssi-2025-0236
APR-FL: Defending Against Hidden Backdoor Attacks With Adaptive Parameter Replacement
Li, T., Niu, P., Khan, S., Khan, M. A., Khan, M., Khan, M. A., Wang, Y., & Hussain, A. (2025) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2025.3612464
Not only Spatial, but Also Spectral: Unnoticeable Backdoor Attack on 3D Point Clouds
Jiang, Y., Li, H., Liu, H., Pan, J., & Xu, J. (2025) · Lecture notes in computer science · doi:10.1007/978-981-95-3537-8_6
Backdoor in Seconds: Unlocking Vulnerabilities in Large Pre-trained Models via Model Editing
Guo, D., Hu, M., Guan, Z., Guo, J., Hartvigsen, T., & Li, S. (2025) · ACM International Conference on Information and Knowledge Management (CIKM) · doi:10.1145/3746252.3761408 · Cited by 5
Wang, S., Zhao, C., Lin, C., Zhao, Z., Yang, Z., Wang, Q., Shen, C. Q., & Guan, X. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3632218
Dynamic Attention Analysis for Backdoor Detection in Text-to-Image Diffusion Models
Wang, Z., Zhang, J., Shan, S., & Chen, X. (2025) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2025.3644016 · Cited by 8
Stealthy Backdoor Carriers: The Threat of Visual Prompts to CLIP
Zhang, M., Zhao, M., Wang, W., & Wang, B. (2026) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3650599
Data Poisoning Attacks and Defenses in Machine Learning: A Survey with Focus on Computer Vision
Nazer, B., Savadattimath, P., & Kumari, S. (2025) · IEEE International Conference on Computer Vision and Machine Intelligence (CVMI) · doi:10.1109/cvmi66673.2025.11337510
Backdoors in Code Summarizers: How Bad Is It?
Wang, C., Yang, Z., Harel, Y., & Lo, D. (2025) · IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1109/ase63991.2025.00102 · Cited by 3
A Multi-Stage Backdoor Detection (MSBD) Framework
Abroshan, H., & Hashmi, S. W. (2026) · IEEE Access · doi:10.1109/access.2026.3659007
Tu, S. (2025) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom66490.2025.00075
A Backdoor Attack via Fixed Patch Triggers in Frequency Domain
Xue, S., Du, J., Huang, W., & Yang, Q. (2026) · Lecture notes in computer science · doi:10.1007/978-981-95-6963-2_3 · Cited by 1
Transferable Backdoor Attack on Any CLIP Model With Any Target Class by Pre-Trained Hack Network
Wang, B., Qian, S., & Xu, C. (2026) · IEEE Transactions on Multimedia · doi:10.1109/tmm.2026.3664918
Digital watermarking for virtual physically unclonable function data concealment and authentication
Khan, R., Saleh, H. H., Mefgouda, B., Alhussein, O., & Muhaidat, S. (2026) · Scientific Reports · doi:10.1038/s41598-026-35159-4
A Unified Framework for Backdoor Trigger Segmentation
Xue, D., Qian, S., & Xu, C. (2026) · IEEE Transactions on Image Processing · doi:10.1109/tip.2026.3666796
ABDP: Adversarial Backdoor Detection and Purification
Yuan, H., Zhu, B., Chu, Q., Gong, T., Yu, N., & Zhang, D. (2026) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2026.3684819
Li, Y., Chen, T., Wang, H., Zhao, J., & Du, B. (2026) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp55912.2026.11464443
Security Enhancement for Person Re-Identification Through Diffusion Driven Semantic Attacks
Du, K., Ma, B., Yang, M., Xu, J., & Li, X. (2026) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2026.3689286
Mitigating Backdoor Attacks via Trigger Reconstruction and Model Hardening
Tao, G., Cheng, S., Shen, G., Liu, Y., An, S., Zhang, Z., Wang, Z., Guo, H., & Zhang, X. (2026) · IEEE Winter Conference on Applications of Computer Vision · doi:10.1109/wacv61042.2026.00064
Purified Distillation Slimming (PDS) for Robust Backdoor Defense
Shan, L., Han, K., Tu, Y., Lee, I., & Hei, X. (2026) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3779208.3785283
AdaPT: Adaptive position trigger for improving backdoor attacks in transfer learning
Zhou, C., Meng, H., Long, Z., Zhang, M., & Zhou, Z. (2026) · Pattern Recognition · doi:10.1016/j.patcog.2026.114247
Chen, Z., Li, J., Lin, M., Mao, A., Li, L., Ning, R., Xin, C., & Wu, H. (2026) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infocom59046.2026.11571574
A4O-Attack: All Triggers for One Sample Backdoor Attacks
Vu-Duc, A., Pham, V. Q. A., Nguyen, L. H., Nguyen, T. U. O. N. G., Tran, C., & Pham, C. (2026) · IEEE Access · doi:10.1109/access.2026.3709411
Metadata
- Authors
- Doan, K., Lao, Y., Zhao, W., & Li, P.
- Affiliations
- Virginia Tech (US)
- Clemson University (US)
- Baidu (China) (CN)
- Venue
- 2021 IEEE/CVF International Conference on Computer Vision (ICCV)
- Publisher
- IEEE
- Published
- 2021-10
- Pages
- 11946-11956
- OpenAlex
- W3201941857
- Cited by
- 211
- References
- 59
- Citations by year
- 2026: 29 · 2025: 48 · 2024: 73 · 2023: 39 · 2022: 20 · 2021: 2
- FWCI
- 15.48
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- IEEE/CVF International Conference on Computer Vision (ICCV) (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Digital Media Forensic Detection
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Keywords
- backdoor attacks, backdoor defense evasion, stealthy attacks, data poisoning, deep neural network, adversarial robustness, nonconvex constrained optimization, two-stage stochastic programming, image classification security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
